• 1 Post
  • 17 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle








  • I work in IT. Most systems have laughable security. Passwords are often saved in plain text in scripts or config files. I went to a site to help out a very large provincial governmental organization move some data out of one system and into another. They sat me down with a loaner laptop and the guy logged me into his user account on the server. When I asked for escalated privileges, he told me he’d go get someone who knew the service account passwords.

    After a few minutes, I started poking around on my own… And had administrative access within an hour. I could read the database (raw data), access documents, start and stop the software, plus, figured out how to get into the upstream system that fed data to this server… I was working on figuring out the software’s admin password when the guy came back. I’m sure that given some more time, I could have rooted the box because the OS hadn’t been updated in years.





  • This is dumb anyway - nobody is going to pump 1MW into a car, the grid can’t support it, never mind a supercharger-style station with between 8 and 20 plugs. A 20-plug Supercharger needs around 1.5MW to serve each station with 72kW.

    And really, when I’m on a road trip, after 3h in the car, I need a break that’s long enough to hit the bathroom, grab a bite to eat, and stretch my legs. The car is usually charged to 90% in under 45 minutes anyway, even if I roll into the charging station at under 5%…